function checkThrows(fn) { try { fn(); ok(false, "Should have thrown"); } catch (e) { ok(/denied|insecure|prohibited/.test(e)); } } function run_test() { var xosb = new Cu.Sandbox('http://www.example.org'); var sb = new Cu.Sandbox('http://www.example.com'); sb.ok = ok; sb.fun = function() { ok(false, "Shouldn't ever reach me"); }; sb.cow = { foopy: 2 }; sb.payload = Cu.evalInSandbox('new Object()', xosb); Cu.evalInSandbox(checkThrows.toSource(), sb); Cu.evalInSandbox('checkThrows(function() { fun(payload); });', sb); Cu.evalInSandbox('checkThrows(function() { Function.prototype.call.call(fun, payload); });', sb); Cu.evalInSandbox('checkThrows(function() { Function.prototype.call.call(fun, null, payload); });', sb); Cu.evalInSandbox('checkThrows(function() { new fun(payload); });', sb); Cu.evalInSandbox('checkThrows(function() { cow.foopy = payload; });', sb); Cu.evalInSandbox('checkThrows(function() { Object.defineProperty(cow, "foopy", { value: payload }); });', sb); // These fail for a different reason, .bind can't access the length/name property on the function. Cu.evalInSandbox('checkThrows(function() { Function.bind.call(fun, null, payload); });', sb); Cu.evalInSandbox('checkThrows(function() { Function.bind.call(fun, payload); });', sb); }